mirror of
https://github.com/hakril/PythonForWindows
synced 2026-06-08 14:31:45 +00:00
Add new def + pe_parse with remotectypes test
This commit is contained in:
@@ -28,9 +28,9 @@ PHANDLE = POINTER(HANDLE)
|
||||
LPCONTEXT = PVOID
|
||||
VOID = DWORD
|
||||
|
||||
structs = ['_LIST_ENTRY', '_PEB_LDR_DATA', '_LSA_UNICODE_STRING', '_RTL_USER_PROCESS_PARAMETERS', '_PEB', '_SECURITY_ATTRIBUTES', '_SYSTEM_VERIFIER_INFORMATION', '_LDR_DATA_TABLE_ENTRY', '_IMAGE_FILE_HEADER', '_IMAGE_DATA_DIRECTORY', '_IMAGE_SECTION_HEADER', '_IMAGE_OPTIONAL_HEADER64', '_IMAGE_OPTIONAL_HEADER', '_IMAGE_NT_HEADERS64', '_IMAGE_NT_HEADERS', '_IMAGE_IMPORT_DESCRIPTOR', '_IMAGE_IMPORT_BY_NAME', '_IMAGE_EXPORT_DIRECTORY', '_MEMORY_BASIC_INFORMATION', '_STARTUPINFOA', '_STARTUPINFOW', '_PROCESS_INFORMATION', '_FLOATING_SAVE_AREA', '_CONTEXT32', '_M128A', '_CONTEXT64', 'tagPROCESSENTRY32W', 'tagPROCESSENTRY32', 'tagTHREADENTRY32', '_LUID', '_LUID_AND_ATTRIBUTES', '_TOKEN_PRIVILEGES', '_OSVERSIONINFOA', '_OSVERSIONINFOW', '_OSVERSIONINFOEXA', '_OSVERSIONINFOEXW', '_OVERLAPPED', '_MIB_TCPROW_OWNER_PID', '_MIB_TCPTABLE_OWNER_PID', '_MIB_UDPROW_OWNER_PID', '_MIB_UDPTABLE_OWNER_PID', '_MIB_UDP6ROW_OWNER_PID', '_MIB_UDP6TABLE_OWNER_PID', '_MIB_TCP6ROW_OWNER_PID', '_MIB_TCP6TABLE_OWNER_PID', '_MIB_TCPROW', '_EXCEPTION_RECORD', '_EXCEPTION_POINTERS64', '_EXCEPTION_POINTERS32', '_DEBUG_PROCESSOR_IDENTIFICATION_ALPHA', '_DEBUG_PROCESSOR_IDENTIFICATION_AMD64', '_DEBUG_PROCESSOR_IDENTIFICATION_IA64', '_DEBUG_PROCESSOR_IDENTIFICATION_X86', '_DEBUG_PROCESSOR_IDENTIFICATION_ARM', '_DEBUG_PROCESSOR_IDENTIFICATION_ALL']
|
||||
structs = ['_LIST_ENTRY', '_PEB_LDR_DATA', '_LSA_UNICODE_STRING', '_RTL_USER_PROCESS_PARAMETERS', '_PEB', '_SECURITY_ATTRIBUTES', '_SYSTEM_VERIFIER_INFORMATION', '_LDR_DATA_TABLE_ENTRY', '_IMAGE_FILE_HEADER', '_IMAGE_DATA_DIRECTORY', '_IMAGE_SECTION_HEADER', '_IMAGE_OPTIONAL_HEADER64', '_IMAGE_OPTIONAL_HEADER', '_IMAGE_NT_HEADERS64', '_IMAGE_NT_HEADERS', '_IMAGE_IMPORT_DESCRIPTOR', '_IMAGE_IMPORT_BY_NAME', '_IMAGE_EXPORT_DIRECTORY', '_MEMORY_BASIC_INFORMATION', '_STARTUPINFOA', '_STARTUPINFOW', '_PROCESS_INFORMATION', '_FLOATING_SAVE_AREA', '_CONTEXT32', '_M128A', '_CONTEXT64', 'tagPROCESSENTRY32W', 'tagPROCESSENTRY32', 'tagTHREADENTRY32', '_LUID', '_LUID_AND_ATTRIBUTES', '_TOKEN_PRIVILEGES', '_OSVERSIONINFOA', '_OSVERSIONINFOW', '_OSVERSIONINFOEXA', '_OSVERSIONINFOEXW', '_OVERLAPPED', '_MIB_TCPROW_OWNER_PID', '_MIB_TCPTABLE_OWNER_PID', '_MIB_UDPROW_OWNER_PID', '_MIB_UDPTABLE_OWNER_PID', '_MIB_UDP6ROW_OWNER_PID', '_MIB_UDP6TABLE_OWNER_PID', '_MIB_TCP6ROW_OWNER_PID', '_MIB_TCP6TABLE_OWNER_PID', '_MIB_TCPROW', '_EXCEPTION_RECORD', '_EXCEPTION_POINTERS64', '_EXCEPTION_POINTERS32', '_DEBUG_PROCESSOR_IDENTIFICATION_ALPHA', '_DEBUG_PROCESSOR_IDENTIFICATION_AMD64', '_DEBUG_PROCESSOR_IDENTIFICATION_IA64', '_DEBUG_PROCESSOR_IDENTIFICATION_X86', '_DEBUG_PROCESSOR_IDENTIFICATION_ARM', '_DEBUG_PROCESSOR_IDENTIFICATION_ALL', '_SYMBOL_INFO', '_MODLOAD_DATA']
|
||||
|
||||
enums = ['_SYSTEM_INFORMATION_CLASS', '_TCP_TABLE_CLASS', '_UDP_TABLE_CLASS', '_MIB_TCP_STATE']
|
||||
enums = ['_SYSTEM_INFORMATION_CLASS', '_TCP_TABLE_CLASS', '_UDP_TABLE_CLASS', '_MIB_TCP_STATE', '_IMAGEHLP_SYMBOL_TYPE_INFO']
|
||||
|
||||
# Enum _SYSTEM_INFORMATION_CLASS definitions
|
||||
_SYSTEM_INFORMATION_CLASS = DWORD
|
||||
@@ -155,6 +155,44 @@ MIB_TCP_STATE_CLOSING = 0x9
|
||||
MIB_TCP_STATE_LAST_ACK = 0xa
|
||||
MIB_TCP_STATE_TIME_WAIT = 0xb
|
||||
MIB_TCP_STATE_DELETE_TCB = 0xc
|
||||
# Enum _IMAGEHLP_SYMBOL_TYPE_INFO definitions
|
||||
_IMAGEHLP_SYMBOL_TYPE_INFO = DWORD
|
||||
IMAGEHLP_SYMBOL_TYPE_INFO = _IMAGEHLP_SYMBOL_TYPE_INFO
|
||||
|
||||
TI_GET_SYMTAG = 0x0
|
||||
TI_GET_SYMNAME = 0x1
|
||||
TI_GET_LENGTH = 0x2
|
||||
TI_GET_TYPE = 0x3
|
||||
TI_GET_TYPEID = 0x4
|
||||
TI_GET_BASETYPE = 0x5
|
||||
TI_GET_ARRAYINDEXTYPEID = 0x6
|
||||
TI_FINDCHILDREN = 0x7
|
||||
TI_GET_DATAKIND = 0x8
|
||||
TI_GET_ADDRESSOFFSET = 0x9
|
||||
TI_GET_OFFSET = 0xa
|
||||
TI_GET_VALUE = 0xb
|
||||
TI_GET_COUNT = 0xc
|
||||
TI_GET_CHILDRENCOUNT = 0xd
|
||||
TI_GET_BITPOSITION = 0xe
|
||||
TI_GET_VIRTUALBASECLASS = 0xf
|
||||
TI_GET_VIRTUALTABLESHAPEID = 0x10
|
||||
TI_GET_VIRTUALBASEPOINTEROFFSET = 0x11
|
||||
TI_GET_CLASSPARENTID = 0x12
|
||||
TI_GET_NESTED = 0x13
|
||||
TI_GET_SYMINDEX = 0x14
|
||||
TI_GET_LEXICALPARENT = 0x15
|
||||
TI_GET_ADDRESS = 0x16
|
||||
TI_GET_THISADJUST = 0x17
|
||||
TI_GET_UDTKIND = 0x18
|
||||
TI_IS_EQUIV_TO = 0x19
|
||||
TI_GET_CALLING_CONVENTION = 0x1a
|
||||
TI_IS_CLOSE_EQUIV_TO = 0x1b
|
||||
TI_GTIEX_REQS_VALID = 0x1c
|
||||
TI_GET_VIRTUALBASEOFFSET = 0x1d
|
||||
TI_GET_VIRTUALBASEDISPINDEX = 0x1e
|
||||
TI_GET_IS_REFERENCE = 0x1f
|
||||
TI_GET_INDIRECTVIRTUALBASECLASS = 0x20
|
||||
IMAGEHLP_SYMBOL_TYPE_INFO_MAX = 0x21
|
||||
# Struct _LIST_ENTRY definitions
|
||||
# Self referencing struct tricks
|
||||
class _LIST_ENTRY(Structure): pass
|
||||
@@ -1009,3 +1047,37 @@ class _DEBUG_PROCESSOR_IDENTIFICATION_ALL(Union):
|
||||
PDEBUG_PROCESSOR_IDENTIFICATION_ALL = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_ALL)
|
||||
DEBUG_PROCESSOR_IDENTIFICATION_ALL = _DEBUG_PROCESSOR_IDENTIFICATION_ALL
|
||||
|
||||
# Struct _SYMBOL_INFO definitions
|
||||
class _SYMBOL_INFO(Structure):
|
||||
_fields_ = [
|
||||
("SizeOfStruct", ULONG),
|
||||
("TypeIndex", ULONG),
|
||||
("Reserved", ULONG64 * 2),
|
||||
("Index", ULONG),
|
||||
("Size", ULONG),
|
||||
("ModBase", ULONG64),
|
||||
("Flags", ULONG),
|
||||
("Value", ULONG64),
|
||||
("Address", ULONG64),
|
||||
("Register", ULONG),
|
||||
("Scope", ULONG),
|
||||
("Tag", ULONG),
|
||||
("NameLen", ULONG),
|
||||
("MaxNameLen", ULONG),
|
||||
("Name", CHAR * 1),
|
||||
]
|
||||
SYMBOL_INFO = _SYMBOL_INFO
|
||||
PSYMBOL_INFO = POINTER(_SYMBOL_INFO)
|
||||
|
||||
# Struct _MODLOAD_DATA definitions
|
||||
class _MODLOAD_DATA(Structure):
|
||||
_fields_ = [
|
||||
("ssize", DWORD),
|
||||
("ssig", DWORD),
|
||||
("data", PVOID),
|
||||
("size", DWORD),
|
||||
("flags", DWORD),
|
||||
]
|
||||
PMODLOAD_DATA = POINTER(_MODLOAD_DATA)
|
||||
MODLOAD_DATA = _MODLOAD_DATA
|
||||
|
||||
|
||||
Reference in New Issue
Block a user